With the rapid development of computer technology, embedded system is being used more and more widely in people's daily life. While in some high-security fields such as aviation, military related control fields, embedded system is playing a critical role. The requirements of security, stability continue to increase. As the most widely used programming language in embedded system, there are still many security risks in c language. Therefore the security testing of embedded software written in c has become a very important part.There are two main methods current field in the field of embedded software testing—white box testing and black box testing, static analysis is one aspect of white box testing.We study the directions of the static analysis, and several common automated testing tools. With security risks of c language, in particular, the stack overflow risk we propose a static analysis method and design an automated testing tool to analysis the risk of overflow. The tool can save a lot of manual labor in software testing, and is effective in the field of practical application. |